Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: KupU4CIl6A5VfZvb3xJz99hSShVSFyUZI34xcf8Nz7Y=
Subject key identifier: 00:CA:69:56:7E:E2:61:25:BB:44:98:9D:66:2F:61:0D:AC:74:16:B5
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 01974C697EE2EE3E7A51C6A7E118E4E79BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 1405
Signing time: Sat 07 Jun 2025 22:01:11 +0000
Manifest this update: Sat 07 Jun 2025 22:01:11 +0000
Manifest next update: Sun 08 Jun 2025 22:01:11 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: 8U8fpiKrNu9zMLbaSHCmdGnxi5EDZ3i75bBUs2970aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:7e:e2:ee:3e:7a:51:c6:a7:e1:18:e4:e7:9b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Jun 7 22:01:11 2025 GMT
Not After : Jun 8 22:01:11 2025 GMT
Subject: CN=00ca69567ee26125bb44989d662f610dac7416b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:2b:a1:f1:d9:d3:a9:0d:2a:3d:4d:0f:f8:
3d:c4:3d:5c:d4:a2:ef:6a:2f:3a:27:6f:be:8a:dc:
b6:0b:76:5d:d8:d8:dc:a9:45:9c:b5:2b:9a:fc:ed:
47:4e:f3:24:f6:73:25:67:b0:14:14:ca:d5:a6:3a:
3a:1a:b2:b4:ef:bf:cf:b5:1b:b3:03:e8:e7:ab:c6:
a9:5d:68:3e:5d:b6:6e:06:5f:dd:bd:f8:50:63:4e:
13:13:36:13:6c:32:9a:69:0b:57:5c:87:76:61:fb:
56:b0:06:36:42:33:e5:ce:98:e2:4e:4f:0a:f4:3e:
9e:3b:22:82:e5:5f:19:d1:0c:14:ed:35:cf:1b:f9:
eb:c6:5d:0e:9b:c3:ae:be:6a:6c:3a:35:e3:d1:ba:
ea:b0:b5:37:bc:72:a0:cd:74:a5:c3:aa:be:4d:40:
cb:63:3c:5f:eb:cb:3a:00:51:62:47:d9:44:75:a4:
b8:5c:74:68:bc:07:21:99:63:0d:ed:44:80:dc:05:
e6:ba:d3:5e:0c:7e:16:26:70:61:f7:fc:65:8f:c4:
2b:60:14:40:6d:7a:8a:e3:25:bd:1b:e1:94:77:97:
c7:6d:3e:54:8e:b8:43:2c:08:d1:19:51:9f:b9:f1:
4f:5b:43:dd:05:8e:9f:37:a2:be:05:dc:83:14:e3:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:69:56:7E:E2:61:25:BB:44:98:9D:66:2F:61:0D:AC:74:16:B5
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e4:e1:0f:83:43:fb:2f:f8:24:43:c2:46:e2:a5:c3:11:96:
f7:c4:dc:48:84:5c:6b:71:54:97:40:d1:11:3e:d7:56:8c:a5:
55:e7:c0:ec:76:5e:9d:52:61:4d:95:07:a0:38:30:6b:f3:2b:
fb:1b:87:d2:3b:19:82:af:39:5f:1b:22:21:ea:b8:d4:d9:e0:
d2:52:82:53:f5:75:8f:c4:a2:eb:95:87:60:2d:72:de:30:b1:
03:ad:3f:19:97:db:23:bf:ff:35:9a:7e:6a:43:3d:85:c9:5b:
d2:7d:ea:80:c0:64:16:c9:d6:41:94:ba:3e:0c:d9:f1:d0:59:
e7:a8:3b:8c:7a:8f:c0:72:66:e3:f9:81:54:eb:2d:7c:7b:df:
6a:3f:b9:91:9d:a5:1f:29:76:e1:40:12:31:88:df:25:b4:6d:
67:e3:90:2b:2c:fb:5b:02:11:c9:d6:34:29:e3:39:18:9b:59:
3d:41:13:16:da:1f:10:3d:e9:81:af:80:92:04:d3:e8:32:6c:
bd:01:30:c0:f6:9e:b9:11:e3:a6:60:6c:cf:69:fa:b3:bd:da:
ac:33:eb:02:b5:77:f5:bb:10:e5:6e:e4:90:73:79:e5:dc:34:
a4:f0:12:7b:8b:bc:a1:02:f7:da:a5:f3:f7:2a:ee:56:f9:a0:
f3:f1:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:40 2025 by rpki-client